AWS linux medium security documentation change
Summary
Updated Amazon Linux 2023 release notes to compare AL2023.6 with newer AL2023.10 version 2023.10.20260325, including updated package counts, new packages (appstream-data, gnome-app-list, gnome-software, mariadb114, python3.14, ruby3.4, rclone, etc.), and version updates for multiple packages (firefox, kernel6.12, kernel6.18, nodejs, php, postgresql, valkey, etc.).
Security assessment
The update includes kernel version bumps (kernel6.12 from 6.12.68 to 6.12.74 and kernel6.18 addition) and kernel livepatch packages, which typically include security patches for vulnerabilities. Additionally, updates to critical software like firefox, php, nodejs, and postgresql often address security vulnerabilities. The presence of kernel livepatch packages specifically indicates ongoing security maintenance for running kernels without reboot, which is a security feature.
Diff
diff --git a/linux/al2023/release-notes/new-AL2023.6-AL2023.10.md b/linux/al2023/release-notes/new-AL2023.6-AL2023.10.md index a6fb7d226..d499be6c0 100644 --- a//linux/al2023/release-notes/new-AL2023.6-AL2023.10.md +++ b//linux/al2023/release-notes/new-AL2023.6-AL2023.10.md @@ -5 +5 @@ -Comparing AL2023.6 version 2023.6.20241010 to AL2023.10 version [2023.10.20260216](./relnotes-2023.10.20260216.html). +Comparing AL2023.6 version 2023.6.20241010 to AL2023.10 version [2023.10.20260325](./relnotes-2023.10.20260325.html). @@ -9,5 +9,5 @@ Package Type | Number of new packages in AL2023.10 compared to AL2023.6 -Source RPMs | 317 -Total Binary RPMs | 1942 -`noarch` binary RPMs | 308 -`x86_64` binary RPMs | 821 -`aarch64` binary RPMs | 813 +Source RPMs | 329 +Total Binary RPMs | 2093 +`noarch` binary RPMs | 334 +`x86_64` binary RPMs | 884 +`aarch64` binary RPMs | 875 @@ -28,0 +29 @@ Source RPM | RPM | Architectures | Version +`appstream-data` | `appstream-data-spal` | noarch | 2023-103.amzn2023 @@ -107 +108 @@ Source RPM | RPM | Architectures | Version -`evolution-data-server` | `evolution-data-server` | aarch64, x86_64 | 3.54.3-1.amzn2023.0.1 +`evolution-data-server` | `evolution-data-server` | aarch64, x86_64 | 3.54.3-1.amzn2023.0.2 @@ -115 +116 @@ Source RPM | RPM | Architectures | Version -`exiv2` | `exiv2` | aarch64, x86_64 | 0.28.5-129.amzn2023 +`exiv2` | `exiv2` | aarch64, x86_64 | 0.28.5-132.amzn2023 @@ -121 +122 @@ Source RPM | RPM | Architectures | Version -`firefox` | `firefox` | aarch64, x86_64 | 140.7.0-1.amzn2023.0.3 +`firefox` | `firefox` | aarch64, x86_64 | 140.8.0-1.amzn2023.0.1 @@ -204,0 +206 @@ Source RPM | RPM | Architectures | Version +`gnome-app-list` | `gnome-app-list` | noarch | 3.0-1.amzn2023 @@ -250,0 +253,3 @@ Source RPM | RPM | Architectures | Version +`gnome-software` | `gnome-software` | aarch64, x86_64 | 47.5-1.amzn2023 +`gnome-software-devel` | aarch64, x86_64 +`gnome-software-fedora-langpacks` | aarch64, x86_64 @@ -324 +329 @@ Source RPM | RPM | Architectures | Version -`gvfs` | `gvfs` | aarch64, x86_64 | 1.56.1-1.amzn2023.0.1 +`gvfs` | `gvfs` | aarch64, x86_64 | 1.56.1-1.amzn2023.0.2 @@ -358 +363 @@ Source RPM | RPM | Architectures | Version -`jpegxl` | `jpegxl-doc` | noarch | 0.10.3-54.amzn2023 +`jpegxl` | `jpegxl-doc` | noarch | 0.10.3-55.amzn2023 @@ -365 +370 @@ Source RPM | RPM | Architectures | Version -`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.68-92.122.amzn2023 +`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.74-98.124.amzn2023 @@ -396,0 +402,2 @@ Source RPM | RPM | Architectures | Version +`kernel-livepatch-6.12.73-95.123` | aarch64, x86_64 +`kernel-livepatch-6.12.74-98.124` | aarch64, x86_64 @@ -399 +406,16 @@ Source RPM | RPM | Architectures | Version -`kiwi` | `dracut-kiwi-lib` | noarch | 10.2.26-3.amzn2023 +`kernel6.18` | `bpftool6.18` | aarch64, x86_64 | 6.18.15-14.217.amzn2023 +`kernel6.18` | aarch64, x86_64 +`kernel6.18-devel` | aarch64, x86_64 +`kernel6.18-headers` | aarch64, x86_64 +`kernel6.18-libbpf` | aarch64, x86_64 +`kernel6.18-libbpf-devel` | aarch64, x86_64 +`kernel6.18-libbpf-static` | aarch64, x86_64 +`kernel6.18-modules-extra` | aarch64, x86_64 +`kernel6.18-modules-extra-common` | aarch64, x86_64 +`kernel6.18-tools` | aarch64, x86_64 +`kernel6.18-tools-devel` | aarch64, x86_64 +`kernel-livepatch-6.18.15-14.217` | aarch64, x86_64 +`kernel-livepatch-6.18.8-9.213` | aarch64, x86_64 +`perf6.18` | aarch64, x86_64 +`python3-perf6.18` | aarch64, x86_64 +`kiwi` | `dracut-kiwi-lib` | noarch | 10.2.38-1.amzn2023 @@ -454 +476 @@ Source RPM | RPM | Architectures | Version -`libde265` | `libde265` | aarch64, x86_64 | 1.0.16-1.amzn2023.0.1 +`libde265` | `libde265` | aarch64, x86_64 | 1.0.16-1.amzn2023.0.2 @@ -517 +539 @@ Source RPM | RPM | Architectures | Version -`libsoup3` | `libsoup3` | aarch64, x86_64 | 3.6.5-55.amzn2023 +`libsoup3` | `libsoup3` | aarch64, x86_64 | 3.6.5-56.amzn2023 @@ -610,0 +633,16 @@ Source RPM | RPM | Architectures | Version +`mariadb114` | `mariadb114` | aarch64, x86_64 | 11.4.10-1.amzn2023.0.1 +`mariadb114-backup` | aarch64, x86_64 +`mariadb114-client-utils` | aarch64, x86_64 +`mariadb114-common` | aarch64, x86_64 +`mariadb114-connect-engine` | aarch64, x86_64 +`mariadb114-cracklib-password-check` | aarch64, x86_64 +`mariadb114-devel` | aarch64, x86_64 +`mariadb114-errmsg` | aarch64, x86_64 +`mariadb114-gssapi-server` | aarch64, x86_64 +`mariadb114-oqgraph-engine` | aarch64, x86_64 +`mariadb114-pam` | aarch64, x86_64 +`mariadb114-rocksdb-engine` | x86_64 +`mariadb114-server` | aarch64, x86_64 +`mariadb114-server-utils` | aarch64, x86_64 +`mariadb114-sphinx-engine` | aarch64, x86_64 +`mariadb114-test` | aarch64, x86_64 @@ -659 +697 @@ Source RPM | RPM | Architectures | Version -`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.0-1.amzn2023.0.1 +`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.1-1.amzn2023.0.1 @@ -667 +705 @@ Source RPM | RPM | Architectures | Version -`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.13.0-1.amzn2023.0.1 +`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.14.0-1.amzn2023.0.1 @@ -676 +714 @@ Source RPM | RPM | Architectures | Version -`nvidia-release` | `nvidia-release` | noarch | 2023-4.amzn2023 +`nvidia-release` | `nvidia-release` | noarch | 2023-5.amzn2023 @@ -723,0 +762 @@ Source RPM | RPM | Architectures | Version +`perl-Capture-Tiny` | `perl-Capture-Tiny-tests` | noarch | 0.50-4.amzn2023.0.1 @@ -736,0 +776 @@ Source RPM | RPM | Architectures | Version +`perl-DBD-Pg` | `perl-DBD-Pg-tests` | aarch64, x86_64 | 3.18.0-6.amzn2023.0.1 @@ -737,0 +778,2 @@ Source RPM | RPM | Architectures | Version +`perl-Encode` | `perl-Encode-tests` | aarch64, x86_64 | 3.21-520.amzn2023.0.1 +`perl-Error` | `perl-Error-tests` | noarch | 0.17030-2.amzn2023.0.1 @@ -746 +788 @@ Source RPM | RPM | Architectures | Version -`perl-Net-SSLeay` | `perl-Net-SSLeay-tests` | aarch64, x86_64 | 1.94-1.amzn2023.0.1 +`perl-Net-SSLeay` | `perl-Net-SSLeay-tests` | aarch64, x86_64 | 1.94-3.amzn2023.0.1 @@ -783 +825 @@ Source RPM | RPM | Architectures | Version -`php8.4` | `php8.4` | aarch64, x86_64 | 8.4.16-1.amzn2023.0.1 +`php8.4` | `php8.4` | aarch64, x86_64 | 8.4.18-1.amzn2023.0.1 @@ -821 +863 @@ Source RPM | RPM | Architectures | Version -`php8.5` | `php8.5` | aarch64, x86_64 | 8.5.1-1.amzn2023.0.1 +`php8.5` | `php8.5` | aarch64, x86_64 | 8.5.3-1.amzn2023.0.1 @@ -891 +933 @@ Source RPM | RPM | Architectures | Version -`postgresql17` | `postgresql17` | aarch64, x86_64 | 17.7-1.amzn2023.0.1 +`postgresql17` | `postgresql17` | aarch64, x86_64 | 17.8-1.amzn2023.0.1 @@ -990 +1032 @@ Source RPM | RPM | Architectures | Version -`python3.13-pip` | `python3.13-pip` | noarch | 24.2-259.amzn2023.0.3 +`python3.13-pip` | `python3.13-pip` | noarch | 24.2-259.amzn2023.0.4 @@ -1018,0 +1061,22 @@ Source RPM | RPM | Architectures | Version +`python3.14` | `python3.14` | aarch64, x86_64 | 3.14.2-2.amzn2023.0.3 +`python3.14-debug` | aarch64, x86_64 +`python3.14-devel` | aarch64, x86_64 +`python3.14-freethreading` | aarch64, x86_64 +`python3.14-freethreading-debug` | aarch64, x86_64 +`python3.14-freethreading-devel` | aarch64, x86_64 +`python3.14-freethreading-idle` | aarch64, x86_64 +`python3.14-freethreading-libs` | aarch64, x86_64 +`python3.14-freethreading-test` | aarch64, x86_64 +`python3.14-freethreading-tkinter` | aarch64, x86_64 +`python3.14-idle` | aarch64, x86_64 +`python3.14-libs` | aarch64, x86_64 +`python3.14-test` | aarch64, x86_64 +`python3.14-tkinter` | aarch64, x86_64 +`python3.14-flit-core` | `python3.14-flit-core` | noarch | 3.12.0-1.amzn2023.0.3 +`python3.14-packaging` | `python3.14-packaging` | noarch | 25.0-1.amzn2023.0.2 +`python3.14-pip` | `python3.14-pip` | noarch | 25.1.1-1.amzn2023.0.1 +`python3.14-pip-wheel` | noarch +`python3.14-setuptools` | `python3.14-setuptools` | noarch | 78.1.1-1.amzn2023.0.2 +`python3.14-setuptools-wheel` | noarch +`python3.14-wheel` | `python3.14-wheel` | noarch | 0.45.1-1.amzn2023.0.2 +`python3.14-wheel-wheel` | noarch @@ -1029,0 +1094 @@ Source RPM | RPM | Architectures | Version +`rclone` | `rclone` | aarch64, x86_64 | 1.73.0-73.amzn2023 @@ -1032,0 +1098,24 @@ Source RPM | RPM | Architectures | Version +`ruby3.4` | `ruby3.4` | aarch64, x86_64 | 3.4.8-27.amzn2023.0.2 +`ruby3.4-bundled-gems` | aarch64, x86_64 +`ruby3.4-default-gems` | noarch +`ruby3.4-devel` | aarch64, x86_64 +`ruby3.4-doc` | noarch +`ruby3.4-libs` | aarch64, x86_64 +`ruby3.4-rubygem-bigdecimal` | aarch64, x86_64 +`ruby3.4-rubygem-bundler` | noarch +`ruby3.4-rubygem-io-console` | aarch64, x86_64 +`ruby3.4-rubygem-irb` | noarch +`ruby3.4-rubygem-json` | aarch64, x86_64 +`ruby3.4-rubygem-minitest` | noarch +`ruby3.4-rubygem-power_assert` | noarch +`ruby3.4-rubygem-psych` | aarch64, x86_64 +`ruby3.4-rubygem-racc` | aarch64, x86_64 +`ruby3.4-rubygem-rake` | noarch +`ruby3.4-rubygem-rbs` | aarch64, x86_64 +`ruby3.4-rubygem-rdoc` | noarch +`ruby3.4-rubygem-rexml` | noarch +`ruby3.4-rubygem-rss` | noarch +`ruby3.4-rubygems` | noarch +`ruby3.4-rubygems-devel` | noarch +`ruby3.4-rubygem-test-unit` | noarch +`ruby3.4-rubygem-typeprof` | noarch @@ -1064 +1153 @@ Source RPM | RPM | Architectures | Version -`systemtap` | `systemtap-jupyter` | aarch64, x86_64 | 5.2-1.amzn2023.0.5 +`systemtap` | `systemtap-jupyter` | aarch64, x86_64 | 5.4-1.amzn2023.0.2 @@ -1117 +1206 @@ Source RPM | RPM | Architectures | Version -`valkey` | `valkey` | aarch64, x86_64 | 8.0.6-3.amzn2023.0.2 +`valkey` | `valkey` | aarch64, x86_64 | 8.0.6-3.amzn2023.0.3